d257790b73533e41a985dded7df3aabd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d257790b73533e41a985dded7df3aabd_JaffaCakes118
Size

126KB
MD5

d257790b73533e41a985dded7df3aabd
SHA1

8f625dbe358ab2c37cdbca594dfaeabbe9f27468
SHA256

094191371aebf4803bbcddccb29dd11de05b72951ee7bc43978fea5bcb7ac2aa
SHA512

d68a649856b1c9955fccc3488ca26feb6a5f72f46c29e873834e8c4161d3585bbb16db562dc760bec2bb1c60143dd407b4704ad9d0bb0040b081c64442f99dd6
SSDEEP

3072:X6GOmWQQvcRUUE9CYBYMQIppFwqi0p03WeHCpaZkIII7P/W:XwmWpvOrYBYMQfV0KdHHZDIA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d257790b73533e41a985dded7df3aabd_JaffaCakes118

Files

d257790b73533e41a985dded7df3aabd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 372KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ